[Webkit-unassigned] [Bug 30898] Browser crash by deeply nested elements
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Nov 11 01:59:44 PST 2009
https://bugs.webkit.org/show_bug.cgi?id=30898
TAMURA, Kent <tkent at chromium.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #42847|0 |1
is obsolete| |
Attachment #42940| |review?
Flag| |
--- Comment #6 from TAMURA, Kent <tkent at chromium.org> 2009-11-11 01:59:43 PST ---
Created an attachment (id=42940)
--> (https://bugs.webkit.org/attachment.cgi?id=42940)
Proposed patch
We can avoid the stack overflow by this patch. However,
* It adds 1 int field to RenderObject. It'll increase memory consumption.
* The test is always timed out.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list